# cat /etc/profile.d/log.sh

if [ -n \"${BASH_VERSION}\" ]; then

  IP=`who am i | sed -r "s/.*(\(.*\))/\\1/"`

  trap "caller >/dev/null || printf '%s\\n' \"\$(date '+%Y/%m/%d %H:%M:%S') \$(tty) \$IP \${BASH_COMMAND}\" 2> /dev/null >> /var/spool/log/$USER.log" DEBUG

fi

mkdir /var/spool/log
chown 711 /var/spool/log

For each user:
touch /var/spool/log/john
chown john.john /var/spool/log/john
chattr +a /var/spool/log /john